Manifest

$ rpki-client -vvvf rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft
File:                     qZ9mmGknIBFUlstFlwLEOtxI1q0.mft (raw, json)
Hash identifier:          1sPNcOEywSXSfBY2lE1dvHmNnMuBLPyz7QNNeWF+4WM=
Subject key identifier:   A6:59:A6:00:56:A4:4D:FB:A8:EC:CE:2B:8A:CC:58:F6:7A:F1:F7:CC
Authority key identifier: A9:9F:66:98:69:27:20:11:54:96:CB:45:97:02:C4:3A:DC:48:D6:AD
Certificate issuer:       /CN=A91CACCA/serialNumber=A99F6698692720115496CB459702C43ADC48D6AD
Certificate serial:       357F
Authority info access:    rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZ9mmGknIBFUlstFlwLEOtxI1q0.cer
Subject info access:      rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft
Manifest number:          357F
Signing time:             Thu 24 Sep 2026 15:12:56 +0000
Manifest this update:     Thu 24 Sep 2026 15:12:55 +0000
Manifest next update:     Thu 01 Oct 2026 15:12:55 +0000
Files and hashes:         1: qZ9mmGknIBFUlstFlwLEOtxI1q0.crl (hash: 9XYLa5GxpBmnrK+1wzCvWZyEUDfujExvEvehHVx69zc=)
Validation:               OK
Signature path:           rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.crl
                          rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZ9mmGknIBFUlstFlwLEOtxI1q0.cer
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.crl
                          rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/DmWk9f02tb1o6zySNAiXjJB6p58.mft
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/DmWk9f02tb1o6zySNAiXjJB6p58.cer
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.crl
                          rsync://rpki.apnic.net/repository/980652E0B77E11E7A96A39521A4F4FB4/mBQsnQtBo7n7YD12mEgjb9HzGSQ.mft
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/mBQsnQtBo7n7YD12mEgjb9HzGSQ.cer
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.crl
                          rsync://rpki.apnic.net/repository/838DB214166511E2B3BC286172FD1FF2/C5zKkN0Neoo3ZmsZIX_g2EA3t6I.mft
                          rsync://rpki.apnic.net/repository/apnic-rpki-root-iana-origin.cer
Signature path expires:   Thu 01 Oct 2026 15:12:54 +0000

Certificate:
    Data:
        Version: 3 (0x2)
        Serial Number: 13695 (0x357f)
    Signature Algorithm: sha256WithRSAEncryption
        Issuer: CN=A91CACCA, serialNumber=A99F6698692720115496CB459702C43ADC48D6AD
        Validity
            Not Before: Sep 24 15:12:55 2026 GMT
            Not After : Oct  1 15:12:55 2026 GMT
        Subject: CN=6ab53df8-fe90
        Subject Public Key Info:
            Public Key Algorithm: rsaEncryption
                RSA Public-Key: (2048 bit)
                Modulus:
                    00:ac:bf:d2:47:f0:ee:41:c2:77:d2:fd:ad:6f:ad:
                    51:db:51:3f:67:7c:f5:5d:9f:d2:83:44:93:6a:a4:
                    43:a4:b3:9b:d1:de:b4:aa:a3:cd:87:97:01:55:2f:
                    11:cc:44:99:d5:22:f0:8c:10:a1:d6:9b:3d:1f:80:
                    55:35:82:ba:93:bc:a4:70:33:0b:0b:80:b2:28:00:
                    3e:f4:57:29:99:1e:1f:d6:7c:2d:b9:01:2b:50:9e:
                    c9:ac:1c:a5:a6:cf:d9:32:31:d7:e9:84:18:30:2b:
                    a5:06:08:2d:c2:54:96:13:06:74:50:78:5c:d9:2b:
                    4d:c5:db:79:80:7e:6e:66:f4:af:4c:c9:df:b2:55:
                    4f:66:b9:90:eb:d0:1b:14:cc:72:04:3d:52:88:04:
                    57:2a:3d:5b:88:b8:fa:26:f7:06:e1:63:ca:27:28:
                    81:f5:a5:84:bf:16:a9:52:f6:27:22:7d:1a:d1:6d:
                    3b:75:77:5f:10:77:7d:22:b3:c0:e1:a7:5a:69:f3:
                    c5:b9:79:94:f6:2b:f1:3a:fa:4a:fd:c9:75:2e:ad:
                    d7:f6:f1:19:15:8f:7a:31:71:45:82:5a:1a:15:04:
                    22:9b:27:f2:bd:e2:a4:77:b7:86:ef:a1:86:e7:bb:
                    a7:6f:8c:87:2d:b0:bc:7f:c3:42:f7:dd:1f:98:1b:
                    0f:6b
                Exponent: 65537 (0x10001)
        X509v3 extensions:
            X509v3 Subject Key Identifier:
                A6:59:A6:00:56:A4:4D:FB:A8:EC:CE:2B:8A:CC:58:F6:7A:F1:F7:CC
            X509v3 Authority Key Identifier:
                keyid:A9:9F:66:98:69:27:20:11:54:96:CB:45:97:02:C4:3A:DC:48:D6:AD

            X509v3 Key Usage: critical
                Digital Signature
            X509v3 CRL Distribution Points:

                Full Name:
                  URI:rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.crl

            Authority Information Access:
                CA Issuers - URI:rsync://rpki.apnic.net/repository/B527EF581D6611E2BB468F7C72FD1FF2/qZ9mmGknIBFUlstFlwLEOtxI1q0.cer

            X509v3 Certificate Policies: critical
                Policy: ipAddr-asNumber
                  CPS: https://www.apnic.net/RPKI/CPS.pdf

            Subject Information Access:
                Signed Object - URI:rsync://rpki.apnic.net/member_repository/A91CACCA/6086D7821DA911E2BB1B4EA408B02CD2/qZ9mmGknIBFUlstFlwLEOtxI1q0.mft

            sbgp-autonomousSysNum: critical
                Autonomous System Numbers:
                  inherit

            sbgp-ipAddrBlock: critical
                IPv4: inherit
                IPv6: inherit

    Signature Algorithm: sha256WithRSAEncryption
         2d:34:47:2f:aa:31:96:5c:e8:f3:d2:04:1d:fb:fa:55:18:b9:
         41:58:79:06:24:aa:76:61:ac:9d:99:57:cc:30:2c:0f:da:e0:
         59:16:9c:51:1c:45:f4:3c:cc:21:81:b9:80:4c:a2:5c:6f:cb:
         f1:44:cf:98:32:5b:c8:5d:1d:b3:2f:70:7e:cf:34:3d:5b:d0:
         fe:68:a7:48:3a:26:70:a0:57:d7:9c:75:6b:c0:7d:a0:38:ab:
         e6:3b:66:5a:b9:b5:ae:de:1d:f4:4e:17:0f:42:0c:c7:c5:64:
         1c:bb:54:a0:ba:08:77:50:fe:c2:16:62:3b:0e:21:a9:a6:7e:
         c2:58:c2:08:0c:41:30:ab:ef:9a:cf:6d:fd:a2:06:05:c1:2c:
         0f:be:c7:67:50:df:b2:b5:06:eb:c7:53:2a:65:3f:33:75:51:
         0a:63:38:82:c1:07:40:23:ab:d8:d7:67:0f:bf:fa:3b:b0:99:
         9b:1e:b8:c2:7c:5a:f1:bb:94:dc:d4:c4:be:55:39:c8:77:0b:
         49:1a:11:6d:dc:b0:4e:37:bf:c0:95:86:d8:73:58:86:c4:d3:
         a8:b9:6b:aa:b9:68:07:2b:63:e7:8f:82:a1:15:b2:b8:71:d5:
         e9:25:a4:b3:c3:55:d9:4d:cb:99:e3:c5:f2:c6:a7:b0:25:74:
         6d:08:ec:4b
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Fri Sep 25 00:09:47 2026 by rpki-client